Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier: jkjdE2xMBstAm+00uUWNtTU9duYzHuA9e0L+VbhUb+E=
Subject key identifier: 2B:09:34:F9:BE:FA:04:09:8B:E1:52:F8:CA:B2:48:7E:71:F4:F3:FC
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial: 019683FFB4EA22D23283561343DD189E717C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number: 03F1
Signing time: Wed 30 Apr 2025 00:01:35 +0000
Manifest this update: Wed 30 Apr 2025 00:01:35 +0000
Manifest next update: Thu 01 May 2025 00:01:35 +0000
Files and hashes: 1: 0Qxf8BiMkAgDdKSfKwiEqluZDnA.roa (hash: H2LtKuGh5JchXV8W58yWszXP9g6XxzZIku1Ogk97V+Y=)
2: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: iwJpxFy7a/Q1Lpd6Hci3VtCKBiaEC9Aes52ILD1OFVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:b4:ea:22:d2:32:83:56:13:43:dd:18:9e:71:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Validity
Not Before: Apr 30 00:01:35 2025 GMT
Not After : May 1 00:01:35 2025 GMT
Subject: CN=2b0934f9befa04098be152f8cab2487e71f4f3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:21:b5:27:5e:b9:05:09:04:f3:40:eb:d4:
b7:f1:1d:4e:22:c5:b5:b9:82:e4:d6:50:51:7e:d2:
e1:af:bd:75:7f:e3:e8:19:10:5f:40:dd:9a:6a:53:
1b:13:f3:30:ad:f8:d2:65:75:3a:74:cd:2f:32:8c:
e9:da:e6:7e:a6:9a:44:ad:d6:32:1d:7e:d2:90:45:
cc:b4:f2:61:27:67:ab:65:2a:de:3d:60:81:86:f0:
06:eb:98:b1:c2:5f:36:5a:45:54:ec:ce:dc:aa:31:
3d:03:ed:3f:68:14:06:be:89:06:66:cd:fc:3d:05:
b1:2f:3d:3e:a2:06:c4:fb:7b:76:14:2e:ac:10:8c:
20:1c:4f:6a:f4:d7:ea:cd:a3:f5:e7:a8:5a:6b:3e:
3b:8e:53:ce:5e:21:b7:63:73:f9:06:92:79:c1:66:
ab:41:72:13:46:bd:99:c9:a3:e0:ab:99:ff:18:c4:
89:e2:5f:b6:98:94:f9:47:f4:1f:9c:66:93:90:1f:
ab:72:99:5d:eb:a2:63:3d:cc:68:a9:44:5e:ef:97:
af:91:0b:64:23:27:50:0a:68:2e:1f:37:80:52:fe:
46:a5:fb:ee:4b:34:6d:68:6f:01:cb:c4:65:35:db:
15:c7:a4:96:5f:df:b6:93:39:3c:b8:95:13:7f:39:
b9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:09:34:F9:BE:FA:04:09:8B:E1:52:F8:CA:B2:48:7E:71:F4:F3:FC
X509v3 Authority Key Identifier:
keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2a:5e:a5:7d:ad:89:d3:f2:9d:9e:7b:46:ac:b1:d7:6e:17:
60:9c:97:d0:95:54:71:ff:b4:d6:77:f4:de:63:29:ed:d8:e3:
44:15:46:6b:01:0f:79:6a:6c:1e:3a:04:ed:93:74:40:6e:c8:
be:11:47:f0:13:75:4f:bd:b3:06:2f:1f:dc:ec:c2:40:3e:85:
62:eb:65:03:1c:bc:54:d7:05:9d:11:e0:bb:17:cb:92:bd:44:
a8:8c:a7:69:c8:03:c4:88:d6:41:1a:c6:c7:7f:a4:0c:9d:e7:
18:0e:10:58:13:70:14:67:f7:d9:db:70:a4:57:67:7a:6e:7c:
f3:2f:f7:50:5e:8b:c2:2e:ee:26:dd:e0:2b:d1:60:03:8c:00:
1a:b5:53:b8:11:e0:9b:6e:12:78:14:24:1d:f3:53:cc:b7:91:
bf:4f:b2:89:9c:fe:82:78:1c:2d:05:40:e7:ed:bd:43:6f:ad:
97:98:01:54:8b:d7:c1:52:cf:2b:35:99:c2:78:86:49:1f:3b:
5d:bd:a9:43:9b:e0:a1:4e:13:6e:0e:05:23:99:1c:5f:92:1a:
6d:95:8c:9f:95:90:20:65:56:bd:e9:ab:69:31:a5:ae:73:46:
77:42:44:0b:f4:14:ad:04:2c:f4:8a:eb:46:b2:4f:d4:90:d2:
02:88:55:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaD/7TqItIyg1YTQ90YnnF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmM2E2YzIxOTQxYzFlMTNiZmZjNGQ0NGQ2MWJkMjU5NWZk
ZDhmZTgwHhcNMjUwNDMwMDAwMTM1WhcNMjUwNTAxMDAwMTM1WjAzMTEwLwYDVQQD
EygyYjA5MzRmOWJlZmEwNDA5OGJlMTUyZjhjYWIyNDg3ZTcxZjRmM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs0htSdeuQUJBPNA69S38R1OIsW1
uYLk1lBRftLhr711f+PoGRBfQN2aalMbE/MwrfjSZXU6dM0vMozp2uZ+pppErdYy
HX7SkEXMtPJhJ2erZSrePWCBhvAG65ixwl82WkVU7M7cqjE9A+0/aBQGvokGZs38
PQWxLz0+ogbE+3t2FC6sEIwgHE9q9NfqzaP156haaz47jlPOXiG3Y3P5BpJ5wWar
QXITRr2ZyaPgq5n/GMSJ4l+2mJT5R/QfnGaTkB+rcpld66JjPcxoqURe75evkQtk
IydQCmguHzeAUv5GpfvuSzRtaG8By8RlNdsVx6SWX9+2kzk8uJUTfzm5wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsJNPm++gQJi+FS+MqySH5x9PP8MB8GA1UdIwQY
MBaAFF86bCGUHB4Tv/xNRNYb0llf3Y/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMt
Y2Y4Njk4NzU3ZDM3LzEvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMtY2Y4Njk4NzU3ZDM3
LzEvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCpepX2t
idPynZ57Rqyx124XYJyX0JVUcf+01nf03mMp7djjRBVGawEPeWpsHjoE7ZN0QG7I
vhFH8BN1T72zBi8f3OzCQD6FYutlAxy8VNcFnRHguxfLkr1EqIynacgDxIjWQRrG
x3+kDJ3nGA4QWBNwFGf32dtwpFdnem588y/3UF6Lwi7uJt3gK9FgA4wAGrVTuBHg
m24SeBQkHfNTzLeRv0+yiZz+gngcLQVA5+29Q2+tl5gBVIvXwVLPKzWZwniGSR87
Xb2pQ5vgoU4Tbg4FI5kcX5IabZWMn5WQIGVWvemraTGlrnNGd0JEC/QUrQQs9Irr
RrJP1JDSAohV+A==
-----END CERTIFICATE-----
Generated at Wed Apr 30 09:54:19 2025 by rpki-client